Knowledge Repository

Ethical hackers aim to serve the public interest, but they may still face criminal prosecution. In this article, we have summarised what you should follow in 9 points to ensure ethical behaviour.

The open resolver is a DNS resolver, which receives queries from every IP-address and is openly accessible on the internet. Open resolvers can be used by cybercriminals for DNS reinforcement attacks against 3rd parties, are sensitive to DNS-cache-poisoning, and can be exploited in the case of other DNS attacks.

ENISA's report helps CSIRTs and local authorities in the fight against cybercrime by identifying good practices and seeks to facilitate cooperation between forensic and cybercrime organisations.

ENISA's 2023 publication provides an overview of domain name holder authentication and verification in the context of domain name registration. It identifies security challenges, best practices, security controls and associated risks in the domain name registration ecosystem.

The European Council's dedicated policy page provides a lot of useful information on EU cybersecurity issues.

The First DNS Abuse SIG's latest publication aims to help incident responders better manage DNS abuse.

Many have heard about Zone-H, but maybe some are still new to the Zone-H's archive of digital attacks, or more precisely attacks against web-servers. This description is for them.

Web Hosting Professional's annual summary page contains more than 50 cybersecurity statistics on various topics. We also recommend resources for statistics related to botnet, phishing and spam.

The FREAK (Factoring Attack on RSA-EXPORT Keys - CVE-2015-0204) is a type of SSL/TLS vulnerability that dates back to the 90’s. It makes it possible for hackers to access a website’s private key by accepting the HTTPS connections between clients and vulnerable servers.

The POODLE (Padding Oracle on Downgraded Legacy Encryption - CVE-2014-3566) uses the SSL version 3.0 protocol's vulnerability. This vulnerability makes it possible for the attacker to intercept the communication encrypted with the SSLv3 protocol.